From: Ross Burton Date: Mon, 27 Feb 2023 16:21:28 +0000 (+0000) Subject: glibc: add ignore for CVE-2023-25139 X-Git-Tag: lucaceresoli/bug-15201-perf-libtraceevent-missing~1555 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b143e355ef362dac89f8b125904d2e47c74e597e;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git glibc: add ignore for CVE-2023-25139 This CVE has been fixed in the 2.37 release branch (07b9521fc6) and we're now using a SHA that incorporates that commit, so manually mark it as ignored. Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-core/glibc/glibc_2.37.bb b/meta/recipes-core/glibc/glibc_2.37.bb index f299a3004a4..31c94929b93 100644 --- a/meta/recipes-core/glibc/glibc_2.37.bb +++ b/meta/recipes-core/glibc/glibc_2.37.bb @@ -19,6 +19,9 @@ CVE_CHECK_IGNORE += "CVE-2019-1010025" # This has been integrated into the 2.36 branch as of c399271 so is now fixed CVE_CHECK_IGNORE += "CVE-2022-39046" +# This is integrated into the 2.37 branch as of 07b9521fc6 +CVE_CHECK_IGNORE += "CVE-2023-25139" + DEPENDS += "gperf-native bison-native" NATIVESDKFIXES ?= ""